chore(deps): bump the npm_and_yarn group across 1 directory with 20 updates #1029
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
…pdates Bumps the npm_and_yarn group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [mysql2](https://github.com/sidorares/node-mysql2) | `2.1.0` | `3.9.7` | | [debug](https://github.com/debug-js/debug) | `4.3.1` | `4.3.2` | | [express](https://github.com/expressjs/express) | `4.16.4` | `4.19.2` | | [plotly.js](https://github.com/plotly/plotly.js) | `1.48.3` | `2.25.2` | | [acorn](https://github.com/acornjs/acorn) | `5.7.3` | `5.7.4` | | [es5-ext](https://github.com/medikoo/es5-ext) | `0.10.50` | `0.10.64` | | [ip](https://github.com/indutny/node-ip) | `1.1.5` | `1.1.9` | | [json5](https://github.com/json5/json5) | `1.0.1` | `1.0.2` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` | | [mixin-deep](https://github.com/jonschlinkert/mixin-deep) | `1.3.1` | `1.3.2` | | [moment](https://github.com/moment/moment) | `2.26.0` | `2.30.1` | | [node-fetch](https://github.com/node-fetch/node-fetch) | `2.6.0` | `2.7.0` | | [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.5.3` | | [underscore](https://github.com/jashkenas/underscore) | `1.9.1` | `1.13.6` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `6.1.1` | `6.1.3` | | [word-wrap](https://github.com/jonschlinkert/word-wrap) | `1.2.3` | `1.2.5` | | [y18n](https://github.com/yargs/y18n) | `4.0.0` | `4.0.3` | Updates `mysql2` from 2.1.0 to 3.9.7 - [Release notes](https://github.com/sidorares/node-mysql2/releases) - [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md) - [Commits](sidorares/node-mysql2@v2.1.0...v3.9.7) Updates `debug` from 4.3.1 to 4.3.2 - [Release notes](https://github.com/debug-js/debug/releases) - [Commits](debug-js/debug@4.3.1...4.3.2) Updates `express` from 4.16.4 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.16.4...4.19.2) Updates `plotly.js` from 1.48.3 to 2.25.2 - [Release notes](https://github.com/plotly/plotly.js/releases) - [Changelog](https://github.com/plotly/plotly.js/blob/master/CHANGELOG.md) - [Commits](plotly/plotly.js@v1.48.3...v2.25.2) Updates `acorn` from 5.7.3 to 5.7.4 - [Commits](acornjs/acorn@5.7.3...5.7.4) Updates `bl` from 1.2.2 to 2.2.1 - [Release notes](https://github.com/rvagg/bl/releases) - [Changelog](https://github.com/rvagg/bl/blob/master/CHANGELOG.md) - [Commits](rvagg/bl@v1.2.2...v2.2.1) Updates `es5-ext` from 0.10.50 to 0.10.64 - [Release notes](https://github.com/medikoo/es5-ext/releases) - [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md) - [Commits](medikoo/es5-ext@v0.10.50...v0.10.64) Updates `ip` from 1.1.5 to 1.1.9 - [Commits](indutny/node-ip@v1.1.5...v1.1.9) Updates `json5` from 1.0.1 to 1.0.2 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v1.0.1...v1.0.2) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `minimist` from 0.0.5 to 0.0.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v0.0.5...v0.0.8) Updates `mixin-deep` from 1.3.1 to 1.3.2 - [Commits](jonschlinkert/mixin-deep@1.3.1...1.3.2) Updates `moment` from 2.26.0 to 2.30.1 - [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md) - [Commits](moment/moment@2.26.0...2.30.1) Updates `node-fetch` from 2.6.0 to 2.7.0 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.6.0...v2.7.0) Updates `qs` from 6.5.2 to 6.5.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.5.3) Updates `static-eval` from 0.2.4 to 2.1.1 - [Release notes](https://github.com/browserify/static-eval/releases) - [Changelog](https://github.com/browserify/static-eval/blob/master/CHANGELOG.md) - [Commits](browserify/static-eval@0.2.4...v2.1.1) Updates `underscore` from 1.9.1 to 1.13.6 - [Commits](jashkenas/underscore@1.9.1...1.13.6) Updates `webpack-dev-middleware` from 6.1.1 to 6.1.3 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v6.1.3/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v6.1.1...v6.1.3) Updates `word-wrap` from 1.2.3 to 1.2.5 - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5) Updates `y18n` from 4.0.0 to 4.0.3 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/y18n-v4.0.3/CHANGELOG.md) - [Commits](yargs/y18n@v4.0.0...y18n-v4.0.3) --- updated-dependencies: - dependency-name: mysql2 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: debug dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: plotly.js dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: acorn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: bl dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: es5-ext dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mixin-deep dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: moment dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: static-eval dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: underscore dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: word-wrap dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 17 updates in the / directory:
2.1.03.9.74.3.14.3.24.16.44.19.21.48.32.25.25.7.35.7.40.10.500.10.641.1.51.1.91.0.11.0.23.0.43.1.21.3.11.3.22.26.02.30.12.6.02.7.06.5.26.5.31.9.11.13.66.1.16.1.31.2.31.2.54.0.04.0.3Updates
mysql2from 2.1.0 to 3.9.7Release notes
Sourced from mysql2's releases.
... (truncated)
Changelog
Sourced from mysql2's changelog.
... (truncated)
Commits
2d3cad8chore(master): release 3.9.7 (#2609)7d4b098fix(security): sanitize timezone parameter value to prevent code injection (#...2efd6abbuild(deps): bump lucide-react from 0.371.0 to 0.372.0 in /website (#2606)e3391edbuild(deps): bump lucide-react from 0.368.0 to 0.371.0 in /website (#2604)4f58caachore(master): release 3.9.6 (#2603)705835dfix: binary parser sometimes reads out of packet bounds when results contain ...2129818chore(master): release 3.9.5 (#2600)f7c60d0fix: revert breaking change in results creation (#2591)7f5b395build(deps-dev): bump@typescript-eslint/eslint-pluginin /website (#2596)a770052build(deps-dev): bump@typescript-eslint/parserin /website (#2595)Updates
debugfrom 4.3.1 to 4.3.2Release notes
Sourced from debug's releases.
Commits
e47f96d4.3.21e9d38ccache enabled status per-logger (#799)Updates
expressfrom 4.16.4 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
... (truncated)
Commits
04bc6274.19.2da4d763Improved fix for open redirect allow list bypass4f0f6cc4.19.1a003cfaAllow passing non-strings to res.location with new encoding handling checks f...a1fa90ffixed un-edited version in history.md for 4.19.011f2b1dbuild: fix build due to inconsistent supertest behavior in older versions084e3654.19.00867302Prevent open redirect allow list bypass due to encodeurl567c9c6Add note on how to update docs for new release (#5541)69a4cf2deps: [email protected]Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
plotly.jsfrom 1.48.3 to 2.25.2Release notes
Sourced from plotly.js's releases.
... (truncated)
Changelog
Sourced from plotly.js's changelog.
... (truncated)
Commits
e8241992.25.2920a50eupdate readme and changelog for v2.25.227932d6Merge pull request #6705 from plotly/reduce-flakiness0249840Merge pull request #6704 from plotly/nestedProperty-protoa4a69d5reduce flakiness on CIa860a32Merge pull request #6690 from Mkranj/croatian_translation5cfbd6eadd test2bec998guard against polluting proto in nestedProperty5efd2a1Merge pull request #6703 from plotly/expandObjectPaths-protoe1e3175fix delay in testMaintainer changes
This version was pushed to npm by archmoj, a new releaser for plotly.js since your current version.
Updates
acornfrom 5.7.3 to 5.7.4Commits
6370e90Mark version 5.7.4fbc15b1More rigorously check surrogate pairs in regexp validatorUpdates
blfrom 1.2.2 to 2.2.1Release notes
Sourced from bl's releases.
Commits
8cb93f4Bumped v2.2.1dacc4acFix unintialized memory accessb6284a8Bumped v2.2.0.538a988Merge pull request #60 from reconbot/reconbot/indexof-readme635b6ceMerge pull request #65 from reconbot/reconbot/empty-slice9b80b00fix: empty shallowSlice return055a3ffMerge pull request #63 from nwoltman/patch-1c768eb8Use Buffer.from() in the documentation270e5f5Bumped v2.1.291cbaf9Merge pull request #62 from jhaenchen/DontUseES2015ConstUpdates
es5-extfrom 0.10.50 to 0.10.64Release notes
Sourced from es5-ext's releases.
... (truncated)
Changelog
Sourced from es5-ext's changelog.
... (truncated)
Commits
f76b03dchore: Release v0.10.642881acdchore: Bump dependenciesc2e2bb9fix: Revert update meant to fix Powershell issue, as it's a regression16f2b72docs: Fix date in the changelogde4e03cchore: Release v0.10.633fd53b7chore: Upgradelint-stagedto v13bf8ed79chore: Ensure postinstall script does not crash on Windows2cbbb07chore: Bump dependencies22d0416chore: Bump LICENSE yeara52e957fix: Support ES2015+ function definitions infunction#toStringTokens()Updates
ipfrom 1.1.5 to 1.1.9Commits
1ecbf2f1.1.96a3ada9lib: fixed CVE-2023-42282 and added unit test5dc3b2f1.1.88e6f28blib: even better node 6 support088c9e51.1.71a4ca35lib: add back support for Node.js 6af82ef41.1.6dba19f6package: exclude test folder from publishing7cd7f30ci: use github workflows4de50aelib: node 18 supportUpdates
json5from 1.0.1 to 1.0.2Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
... (truncated)
Commits
a62db1e1.0.2e0c23fedocs: update CHANGELOG for v1.0.262a6540fix: add proto to objects and arraysUpdates
minimatchfrom 3.0.4 to 3.1.2Commits
699c4593.1.22f2b5fffix: trim pattern25d7c0d3.1.155dda29fix: treat nocase:true as always having magic5e1fb8d3.1.0f8145c5Add 'allowWindowsEscape' option570e8b1add publishConfig for v3 publishes5b7cd333.0.620b4b56[fix] revert all breaking syntax changes2ff0388document, expose, and test 'partial:true' optionUpdates
minimistfrom 0.0.5 to 0.0.8Changelog
Sourced from minimist's changelog.
Commits
37545680.0.866c248fhandle joined single lettersfa63ed4return '' if flag is string and emptycd46bf90.0.7d1da408another swap of .test for .match8ef0bdf0.0.67e0d1aduse .test() instead of .match() to not crash on non-string values in the argu...Updates
mixin-deepfrom 1.3.1 to 1.3.2Commits
754f0c21.3.290ee1faensure keys are valid when mixing in valuesMaintainer changes
This version was pushed to npm by doowb, a new releaser for mixin-deep since your current version.
Updates
momentfrom 2.26.0 to 2.30.1Changelog
Sourced from moment's changelog.
... (truncated)
Commits
485d9a7Build 2.30.1e048b09Bump version to 2.30.1f9f2d58Update changelog for 2.30.1a52ffb2Revert "Merge pull request #5827 from BobZombie:feature/fix_d.ts"ddd6809Build 2.30.0be64d00Bump version to 2.30.0ad41179Update changelog for 2.30.063fe479[misc] Make code ES6 compatible0f0195fRevert "Merge pull request #5599 from Alanscut:issue_4985"15b82f5Revert "Merge pull request #5597 from Alanscut:issue-5596"Updates
node-fetchfrom 2.6.0 to 2.7.0Release notes
Sourced from node-fetch's releases.
... (truncated)
Commits
9b9d458feat:AbortError(#1744)65ae25afix: Remove the default connection close header (#1765)8bc3a7cfix: socket variable testing for undefined (#1726)afb36f6Revert "fix: handle bom in text and json (#1739)" (#1741)29909d7fix: handle bom in text and json (#1739)70f592dfix: "global is not defined" (#1704)<...Description has been truncated